[FLOW3-general] Problem with setting proper methods-based policies

[François Suter]

Hi Andi,

> Interesting use case,

Really? Seems rather banal to me, having a view which is only for a 
specific group of people. But I hesitated doing a different controller. 
I don't know which makes more sense from a formal point of view.

> however I would have expected the same result as you have. So this is probably a bug.

:-(

> For a quick fix you could try to exclude the timeline action in your first resource's regex.

Hmm, how would you do that? Negating is not easy with regular expressions.

BTW are they limitations to the kind of regex you can use in policies? I 
remember doing some stuff that didn't work and found it quite 
unsettling. For example, something like:

For_Bar: 'method(Foo\Bar\Controller\BarController->(index|update)Action())'

didn't work in ensuring access only to "index" and "update" methods (at 
least last time I tried).

Cheers

-- 

Francois Suter
Cobweb Development Sarl - http://www.cobweb.ch